Additional Features

Introduction

After completing your first steps with MDR and completing the onboarding wizard, you can start configuring the service to align with your organization's environment, users, and cybersecurity requirements.

This article provides an overview of some more advanced configuration tasks available to administrators. Completing these help ensure that Field Effect MDR can effectively monitor your environment, provide meaningful insights, and support your organization's cybersecurity objectives.

Before You Begin

Ensure that:

• You have administrator access to Field Effect MDR.
• Your organization has completed the onboarding process.
• The necessary endpoints, network sensors, or collectors have been deployed, if applicable.
• You have access to relevant information about your users, systems, and network environment.

Video Overview

Additional Features

ITSM Integrations

Field Effect MDR, while being a powerful standalone solution, can integrate with several Information Technology Service Management (ITSM) or Professional Services Automation (PSA) tools, allowing you to use our technology within a familiar tool and workflow. 

Once you integrate Field Effect MDR with your preferred tool, AROs will synchronize into the tool as tickets or issues. As your team updates the ARO (comments or dismisses) within your system, the changes will be synchronized back to the MDR Portal, keep both systems, and our analysts, informed.

We offer integrations for the following ITSM and PSA solutions. Please see the appropriate article below for your system and how to configure the integration: 

• Autotask 
• ConnectWise PSA
• HaloPSA
• ServiceNow

Other Integrations (Cloud, Cybersecurity, Log Monitoring) 

Configuring an integration is typically as simple as providing administrator credentials for the service. Our Help Center has setup guides for every cloud service supported by Field Effect. 

For help completing this phase, visit our Integrations Help Center Chapter. 

AI Detection & Response (AIDR)

Field Effect MDR's AI Detection & Response (AIDR) leverages our endpoint agent, the network sensor, and the DNS Firewall to help you understand, govern, and secure AI tool usage in your network. 

This functionality is built directly into our MDR platform, and geared at addressing challenges such as: 

• Shadow AI (employees using AI tools without approval)
• Unauthorized or rogue AI applications
• Over-permissioned AI integrations
• Data leakage and privacy risks
• AI governance and compliance concerns
• Prompt manipulation and other AI-specific attack vectors

See Configuring AIDR for more on setting up these additional features.

DNS Firewall

Our DNS Firewall provides DNS protection to devices connected to your internal networks (on-network protection), or when connected to external networks (roaming).

SEAS

SEAS is a service that allows users to submit any email they find suspicious for analysis. Once enabled, any user can send a suspicious email to SEAS.

Single Sign On

If your organization uses Single-Sign-On (SSO) to log into MDR accounts, you can enforce some of our systems (The MDR Portal, Vision, and the mobile app) to only allow SSO logins.

Antivirus Management

Antivirus Management, powered by our endpoint agent, allows endpoint devices to report back to the network sensor about the status and configuration of the device's Antivirus. 

Syslog Forwarding

Syslog is a standard format for the reporting of system events and are supported by most operating systems and devices. Once collected, syslog messages can be used to investigate incidents. 

Drive Lock

Drive Lock allows administrators to configure our service to immediately block any removable drive that connects to a device. See Drive Lock: Overview & Setup to get started with this additional feature.

Enabling Optional AROs

There are several optional analytics that you can enable so that you receive additional AROs.

Field Effect Mobile App

Our Effect Mobile App provides secure access to your organization's Field Effect MDR environment from your mobile device. Once installed, you can view security information, stay informed about important events, and access MDR services while away from your computer. 

To receive notifications on the go, and access your MDR Service on-demand, download the Field Effect mobile app.